H3C SecPath V100-S, Installation Manual

Page 1: ...H3C SecPath V100 S Security Gateway Installation Manual Hangzhou H3C Technologies Co Ltd http www h3c com Manual Version T2 08044F 20070430 C 1 02...

Page 2: ...InnoVision and HUASAN are trademarks of Hangzhou H3C Technologies Co Ltd All other trademarks that may be mentioned in this manual are the property of their respective owners Notice The information i...

Page 3: ...b Based Configuration Manual It directs users to configure the H3C SecPath Series Firewalls in Web mode Organization H3C SecPath V100 S Series Security Gateways Installation Manual is organized as fol...

Page 4: ...ms keywords or arguments in square brackets are optional x y Alternative items are grouped in braces and separated by vertical bars One is selected x y Optional alternative items are grouped in square...

Page 5: ...Create Folder III Symbols Convention Description Warning Means reader be extremely careful Improper operation may cause bodily injury Caution Means reader be careful Improper operation may cause data...

Page 6: ...fety Precautions 2 3 2 3 Unpacking Check 2 3 2 4 Installation Tools Meters and Equipment 2 4 Chapter 3 Installing the SecPath V100 S 3 1 3 1 Installation Flow 3 1 3 2 Mounting the SecPath V100 S 3 2 3...

Page 7: ...Using XModem 5 3 5 3 Backing Up and Restoring the Extended Segment of the Boot ROM 5 6 5 4 Upgrading the Application Program Using TFTP 5 7 5 5 Uploading Downloading Application File Using FTP 5 8 5 6...

Page 8: ...ssembly 3 4 Figure 3 4 Ethernet cable assembly 3 5 Figure 4 1 Local configuration through the console port 4 1 Figure 4 2 Setting up a new connection 4 2 Figure 4 3 Setting the connection port 4 2 Fig...

Page 9: ...V100 S 1 4 Table 1 3 Attributes of the console port 1 5 Table 1 4 Attributes of the console port 1 5 Table 1 5 Attributes of the Ethernet interfaces 1 6 Table 2 1 Temperature humidity requirements in...

Page 10: ...accounting AAA network address translation NAT and quality of service QoS the SecPath V100 S can guarantee high security and reliability for private networks over the Internet The SecPath V100 S has...

Page 11: ...e security of private networks over the Internet z Virtual router redundancy protocol VRRP to provide communication line or equipment backup in case of failure This effectively enhances network robust...

Page 12: ...xed LAN interface 1 9 Three LEDs for fixed LAN interface 0 10 Fixed WAN interface WAN 11 Fixed LAN interface 3 LAN 3 12 Fixed LAN interface 2 LAN 2 13 Fixed LAN interface 1 LAN 1 14 Fixed LAN interfac...

Page 13: ...running system with the CPU Flash is the major file storing medium where application files traps and configuration files are stored Boot read only memory Boot ROM stores the bootstrap program files 1...

Page 14: ...to each Ethernet interface are top down order LINK ACT LED 100M LED and FULL LED 1 2 4 Fixed Interface Attributes I Console port CONSOLE Table 1 3 Attributes of the console port Attribute Description...

Page 15: ...1 5 Attributes of the Ethernet interfaces Attribute Description Connector RJ45 Interface standard All Ethernet interfaces on the SecPath V100 S support MDI MDIX autosensing Frame format Ethernet_II Et...

Page 16: ...uctor CMOS circuitry to fail The following table lists the temperature and humidity requirements Table 2 1 Temperature humidity requirements in the equipment room Temperature Relative humidity 0 C to...

Page 17: ...uipment room is dust proof z Maintain adequate temperature and humidity z Wear an ESD preventive wrist strap and clothes when contacting the circuit board z Place the removed circuit board upward on t...

Page 18: ...port the weight of the device and the installation accessories z Make sure that the rack is well grounded 2 2 Safety Precautions When reading this manual pay adequate attention to the following Warnin...

Page 19: ...er z ESD preventive wrist strap z Static shielding bag II Cables z Grounding wire and power cord z Console cable z Optional cables III Meters and other equipment z Hub or LAN switch z Console terminal...

Page 20: ...nect the PGND Connect the power cord Connect the security gate way to the console terminal Verify the installation Power up the security gateway Troubleshooting Power down the security gateway Verify...

Page 21: ...penings z Do not place any heavy object on the device 3 2 2 Rack Mounting The SecPath V100 S is designed to be mounted in 19 inch standard racks The following table shows its physical dimensions Table...

Page 22: ...ding screw with a grounding symbol see Figure 1 2 which must be grounded properly to safely channel the faradic current and leakage current to the ground and to make the device less susceptible to ele...

Page 23: ...h a console terminal follow these steps to connect the console cable Step 1 Select a console terminal The console terminal can be either a PC or a standard ASCII terminal with an RS232 serial port Ste...

Page 24: ...magnetic compatibility III Connecting the Ethernet cable Take the LAN0 interface on the front panel of the SecPath V100 S for example Follow these steps to connect its Ethernet cable Caution Read the...

Page 25: ...f the AC power cord to the AC input socket 100 VAC to 240 VAC on the right of the rear panel and the other end to the AC mains supply Step 3 Place the power switch in the ON position Step 4 Check that...

Page 26: ...ecurity gateway to a console terminal Connect the RJ45 connector of the console cable to the console port on the security gateway and the DB9 connector to the serial port on the PC see Figure 4 1 RS23...

Page 27: ...The dialog box as shown in Figure 4 3 pops up Step 4 Select the serial port to be used from the Connect Using drop down list The serial port selected here must be the one connected to the console cabl...

Page 28: ...SecPath V100 S 4 3 z Stop bits 1 z Flow control none Figure 4 4 Setting communication parameters Step 6 Click OK The HyperTerminal dialog box appears Step 7 Select Properties Step 8 In the Properties...

Page 29: ...accident occurs you can quickly shut off the power II Powering up the SecPath V100 S z Place the power switch of the power supply in the ON position z Place the power switch on the security gateway i...

Page 30: ...y Hardware Version is MTR 1 0 CPLD Version is CPLD 0 0 Press Ctrl B to enter Boot Menu Press Ctrl B now to enter the Boot Menu Otherwise the system starts decompressing the program Note To enter the B...

Page 31: ...urity gateway see H3C SecPath Series Security Products Operation Manual 4 2 2 Command Line Interface I Features of the command line interface CLI The CLI offers a series of configuration commands It a...

Page 32: ...n Manual H3C SecPath V100 S Security Gateway Chapter 4 Booting and Configuring the SecPath V100 S 4 7 allowed to execute some common commands such as ping display current configuration and interface i...

Page 33: ...ad system files and http zip files separately instead of uploading the whole file You can detach the http zip files by using the detach command 5 1 Boot Menu This section introduces the Boot menu that...

Page 34: ...upgrade If you fail to upgrade the software and the system prompts invalid version although you use the correct software version you can select this option to ignore the version check during software...

Page 35: ...load an application program using XModem The security gateway supports these downloading speeds Downloading application program from serial Please choose your download speed 1 9600 bps 2 19200 bps 3 3...

Page 36: ...log box pops up Figure 5 1 The Send File dialog box Step 5 Click Browse select the application file to be downloaded set protocol to XModem and click Send The following interface pops up Figure 5 2 Th...

Page 37: ...s those described in section 5 2 I Upgrading the application program Caution If you fail to upgrade the entire Boot ROM program you cannot restore it on site Therefore you can only upgrade the entire...

Page 38: ...hen the Boot ROM operation menu appears again select 5 to exit and reboot the security gateway II Restoring the extended segment of Boot ROM from the Flash If faults occur to the extended segment of t...

Page 39: ...the Ethernet interface and set the directory of the file to be downloaded 2 Configure the security gateway Step 1 Start the security gateway and enter the Boot menu see section 5 1 Boot Menu Select 2...

Page 40: ...Saving config please wait OK Net Port Download Menu 1 Change Net Parameter 2 Download From Net 3 Exit to Main Menu Enter your choice 1 3 2 3 Download application program using TFTP Select 2 to downloa...

Page 41: ...V100 S FTP Server Ethernet interface 10 110 10 10 24 FTP Client 10 110 10 13 24 Figure 5 3 Setting up the local upload download environment Step 1 Connect the PC through the Ethernet port of SecPath...

Page 42: ...Ask for the cooperation of the service personnel at the security gateway side and perform the following configuration Step 1 Configure authentication mode Note You can perform AAA authentication conf...

Page 43: ...er ready on SecPathGateway at User 10 110 10 10 none Step 2 Access FTP server using the configured user name and password User 10 110 10 10 none SecPath Gateway Enter the user name 331 Password requir...

Page 44: ...m bootromfull program from Flash root directory using the upgrade bootrom full command and write it into Boot ROM to complete Boot ROM upgrade z Download application or configuration files ftp get Ent...

Page 45: ...off after you have checked the above items contact the agent 6 2 Troubleshooting Configuration System If the security gateway operates normally after being powered up the console terminal displays bo...

Page 46: ...st 6 3 Troubleshooting Application Upgrading I Fault 1 1 Symptom Boot the security gateway upgrade Comware software using TFTP and the system displays the following messages Net Port Download Menu 1 C...

Page 47: ...iles are not available z The paths of the files are not correct Confirm that the files to be downloaded are under the path specified by the TFTP Server III Fault 3 1 Symptom Boot the security gateway...

Page 48: ...urity Gateway Chapter 6 Troubleshooting 6 4 Note There is a bar code pasted on the security gateway Since the bar code contains product and maintenance information you need to tell the agent about the...